Best way to access IOT VLAN

[Sonic007]

Hi everyone,

 

What would you say is the best way to access an IOT VLAN, for example to change some settings on a CCTV's NVR?

 

Is it best to connect a laptop to the IOT VLAN and connect that way or is it worth setting up firewall rules to allow connection to the IOT VLAN from the other main VLAN.

 

What is best practise?

 

Thankyou.

[Davit2005]

Personally I'd create a firewall rule to give the access required only. Tie down to a specific source IP though.

[DalekSec]

I wouldn't put the CCTV NVR on the IOT network, CCTV should have it's own network IMO and fenced off from the rest.

 

IOT network to me is peoples smart TVs etc

[Sonic007]

This is for a home setup. My IOT network is anything that might "phone home or have questionable security". So my NVR sits on that.

[DalekSec]

Ah sorry thought was work! Carry on

 

Edit:

 

Wait, if you have a device with questionable security, why would you stick that closer to your NVR?

[Sonic007]

Ah sorry thought was work! Carry on

 

Edit:

 

Wait, if you have a device with questionable security, why would you stick that closer to your NVR?

 

Everything has Device isolation so nothing on that VLAN can talk to each other.